MD5 Hashes in the Eeeezy Leak: 205 Japanese Delivery Users Exposed

HEROIC Cyber's DarkHive breach intelligence has confirmed that Eeeezy (株式会社イージー), a Japanese delivery service, suffered a database breach on December 24, 2024 that compromised 205 user records. The leaked data set pairs email addresses and phone numbers with first names, last names, usernames, and MD5 password hashes.

Why This General Business Database Breach Is Dangerous

The weak link in this leak is the hashing algorithm. MD5 has been broken for collision resistance for two decades and can be reversed at consumer GPU speed. A modest cracking rig will recover every reused or dictionary-based password in minutes, meaning the 205 records in Eeeezy should be treated as plaintext credentials for planning purposes.

What Was Exposed in Eeeezy (株式会社イージー)

• 205 user records
• Email addresses
• Phone numbers
• Usernames
• First names
• Last names
• Password hashes (MD5)

Why This Matters

Japanese consumers often use the same email and password across delivery, e-commerce, and payment apps. Once the MD5 hashes are reversed, attackers can attempt logins on Rakuten, Mercari, LINE Pay, and major bank portals. Because phone numbers are in the same record, SIM-swap and SMS phishing are also on the table for the affected users.

How General Business Database Breaches Work

Mid-market services that launched years ago often still run legacy authentication code that stored passwords as unsalted MD5 hashes. When attackers pivot into the database, they take everything in one dump. Dumps like this are traded on Japanese-language Telegram groups before making their way to global combolists.

Check If You Are Affected

HEROIC's identity protection platform scans over 400 billion compromised records, including Japanese service breaches like Eeeezy. Run a free scan to see whether your email, password, or personal data appears in this breach or any other known dataset.